Privacy Policy
Lumo is a fictional brand created as a demonstration piece by Pixel Compile. This page describes the processing of personal data for the first production waitlist and the next flavour notification.
1. Data Controller
Pixel Compile is the controller for the processing described in this demonstration and the owner of the code and assets. Lumo is neither an active company nor a commercial brand.
To exercise your rights of access, rectification, erasure, restriction, portability, or to withdraw consent, contact hello@pixelcompile.com.
2. Data collected
- emailTo send the chosen notification.
- plan selectionOne-off purchase or monthly delivery, only for the first production waitlist. Not applicable to the next flavour notification.
- timestampDate and time of consent, generated by the server.
- consentRecord that the person agreed to receive that specific notification.
- purposeIdentifies the type of notification: first production waitlist or next flavour notification.
We do not request name, address, payment details, or health data.
3. Purpose and legal basis
Data is collected for two distinct and separate purposes:
- First production waitlist — to send an email when the first production run has a date. The plan selection records the preference (one-off purchase or monthly delivery).
- Next flavour notification — to send an email when there is a second flavour. No plan is stored.
The legal basis is consent. Each form requests consent for a specific purpose; subscribing to one does not authorise the other notification, additional advertising, or sharing data with third parties for marketing.
4. Retention
Retention periods vary by purpose:
- First production waitlist: 12 months after registration or until the launch notification is sent, whichever occurs first.
- Next flavour notification: until consent is withdrawn or the next flavour is announced, whichever occurs first.
A request to withdraw consent brings forward the deletion for either purpose.
5. Providers
The implementation uses:
- Cloudflare Workers for hosting;
- Cloudflare D1 for storing records;
- Cloudflare Turnstile for protection against automated submissions.
These providers act only to the extent necessary for their respective services.
6. Cookies and analytics
The planned analytics tool is Cloudflare Web Analytics, which works without cookies and without individual identification. No custom events are collected. Because it operates without cookies, a consent banner is not required for analytics.
This page does not authorise the future introduction of additional tracking tools without a policy review.
7. Your rights
You can request access, rectification, erasure, restriction, or portability of your data, and withdraw your consent at any time, without affecting the lawfulness of prior processing.
You can also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).
8. Automated decisions
No profiling or solely automated decision-making is planned. The chosen plan is merely associated with the waitlist registration.
9. Updates
This policy will be reviewed whenever data processing changes. Last review: .